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Foreword 

This translation has been made based on the original Japanese Industrial 
Standard established by the Minister of Health, Labour and Welfare and 
the Minister of Economy, Trade and Industry through deliberations at the 
Japanese Industrial Standards Committee according to the proposal of 
estabhshing a Japanese Industrial Standard from The Japan Machinery 
Federation (JMF), with a draft of Industrial Standard based on the provi- 
sion of Article 12 Clause 1 of the Industrial Standardization Law. 
This JIS document is protected by the Copyright Law. 
Attention is drawn to the possibility that some parts of this Standard may 
confhct with a patent right, apphcation for a patent after opening to the 
public, utility model right or application for registration of utility model 
after opening to the public which have technical properties. The relevant 
Ministers and the Japanese Industrial Standards Committee are not re- 
sponsible for identifying the patent right, application for a patent after 
opening to the public, utility model right or application for registration of 
utility model after opening to the public which have the said technical 
properties. 
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JAPANESE INDUSTRIAL STANDARD JIS B 9714 : 2006 

(ISO 14118 : 2000) 

Safety of machinery-Prevention of unexpected start-up 



Introduction 

This Japanese Industrial Standard has been prepared based on the first edition of 
ISO 14118 Safety of machinery-Prevention of unexpected start-up published in 2000 
without modifying the technical contents. 

The portions underlined with dots are the matters not stated in the original Interna- 
tional Standard. 

Keeping a machine in a stopped condition while persons are present in danger zones 
is one of the most important conditions of the safe use of machinery and hence one of 
the major aims of the machine designer and machine user. 

In the past, the concepts of "operating machine" and "stopped machine" w^ere gener- 
ally unambiguous; a machine was- 

- operating w^hen its movable elements, or some of them, were moving; 

- stopped when its movable elements were at rest. 

Machine automation has made the relationship between "operating" and "moving" on 
the one hand and "stopped" and "at rest" on the other hand, more difficult to define. 
Automation has also increased the potential for unexpected start-up, and a significant 
number of accidents have occurred where machines, stopped for diagnostic work or 
corrective actions, started up unexpectedly. 

Hazards other than mechanical hazards generated by movable elements (e.g. from a 
laser beam) also need to be taken into account. 

The risk assessment relating to the presence of persons in a danger zone of a stopped 
machine needs to take into account the probability of an unexpected start-up of the 
hazard-generating elements. 

This Standard provides machine designers and machiner\^ safety standard technical 
committees with a survey of built-in measures which can be used to prevent unex- 
pected start-up. 

1 Scope 

This Standard specifies designed-in means aimed at preventing unexpected machine 
start-up (see 3.2) to allow safe human interventions in danger zones (see Annex A). 

This Standard applies to unexpected start-up from all types of energy source, i.e..* 

- power supply, e.g. electrical, hydraulic, pneumatic; 

- stored energy due to, e.g., gravity, compressed springs; 

- external influences, e.g. from W'ind. 

NOTE- The International Standard corresponding to this Standard is as follows. 
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ISO 14118-2000 Safety of machinery-Prevention of unexpected start-up 
(IDT) 

In addition, symbols which denote the degree of correspondence in the 
contents between the relevant International Standard and JIS are IDT 
(identical), MOD (modified), and NEQ (not equivalent) according to 
ISO/IEC Guide 21. 

2 Normative references 

The following standards contain provisions which, through reference in this text, 
constitute provisions of this Standard. If the indication of the year is given to the re- 
ferred standard, only the edition of indicated year constitutes the provision of this 
Standard but the revision and amendment made thereafter do not apply. 

JIS B 9700-1-2004 Safety of machinery-Basic concepts, general principles for de- 
sign-Part 1' Basic terminology, methodology 

NOTP:;: Corresponding International Standard: ISO 12100-1:2003 Safety of 
machinery— Basic concepts, general principles for design— Part 1- Basic 
terminology, methodology (IDT) 

JIS B 9700-2^2004 Safety of machinery-Basic concepts, general principles for de- 
sign-Part 2' Technical principles 

NOTE: Corresponding International Standard: ISO 12100-2:2003 Safety of 
machinery-Basic concepts, general principles for design-Part 2- Technical 
principles (IDT) 

JIS B 9702:2000 Safety of machinery-Principles of risk assessment 

NOTE: Corresponding International Standard: ISO 14121:1999 Safety of 
machinery-Principles of risk assessment (IDT) 

JIS B 9960-1:1999 Safety of machinery-Electrical equipment of machines— Part 1- Gen- 
eral requirements 

NOTE: Corresponding International Standard: lEC 60204-1:1997 Safety of 
machinery-Electrical equipment of machines-Part 1' General requirements 
(MOD) 

3 Terms and definitions 

For the purposes of this Standard, the terms and definitions given in JIS B 
9700-1:2004 and the following apply. 

3.1 start"up , machine start-up 

change from rest to motion of a machine or of one of its parts 

NOTE: The definition includes functions other than motion, e.g. switch-on of a 
laser beam. 

3.2 unexpected [unintended] start-up 

any startup caused by: 
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" a start cominand which is the result of a failure in, or an external influence on, the 
control system; 

- a start command generated by inappropriate action on a start control or other parts 
of the machine as, e.g., a sensor or a power control element? 

" restoration of the power supply after an interruption; 

- external/internal influences (gravity, wind, self~ignition in internal combustion en- 
gines, etc.) on parts of the machine. 

NOTE- Start-up by the normal operation of automatic machinery is not to be con- 
sidered as unintended start-up, bvit can be considered to be unexpected from 
the point of view of the operator. Prevention of accidents in this case in- 
volves the use of safeguarding measures (see JIS B 9700-2^2004, clause 5). 

(based on JIS B 9700-1:2004, 3.29) 

3.3 isolation and energy dissipation 

procedure which consists of all of the four following actions : 

a) isolating (disconnecting, separating) the machine (or defined parts of the machine) 
from all power supplies; 

b) locking (or otherwise securing), if necessary (for instance in large machines or in 
installations), all the isolating units in the "isolated" position; 

c) dissipating or restraining [containing] any stored energy which may give rise to a 
hazard. 

NOTE: Energy considered in c) above may be stored in e.g.: 

- mechanical parts continuing to move through inertia; 

- mechanical parts liable to move by gravity; 

- capacitors, accumulators; 
~~ pressurized fluids; 

- springs. 

d) verifying by using a safe working procedure that the actions taken according to a), 
b) and c) above have produced the desired effect. 

3 . 4 _ _ machine actiiator 

dr ivi n g . me ch anisni. w h iph^ ac t u a te s the m achine .(see JIS . B . 9960: l: 1.9.9.9 1 . ?, 32) 

4 General requirements 

4. 1 Isolation and energy dissipation 

Machines shall be provided with means intended for isolation and energy dissipation 
(see clause 5), especially with a view to major maintenance, work on power circuits and 
decommissioning in accordance with the essential safety requirement (see NOTE). 
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NOTE: Foreneri^.isojation,.th^^ 

Annex A-l.- 6 . 3,. The_ p_ro vision . ([[_ '0 is _ show n .as re f e re nee .. 

!Mg asure s. ,fgr. jsplati^^^^ 

given, to. aU.macMues..^^^^ 

a.ble .. JX X^connec tjon _giy e 

l?^..lQpketi__In the ca^^ 

CO n n e c t .th e J3 lug, J.f i^^^ 

PP si tio n. . .whe re. . .the. . pp.e r ator s . .c.an . .come clo se ^ . .isolating. . d.e vices . .shall . be 

] .Qck.e.d... .Any .e.nergv .r e.m ai,ne d . or . s to.r e.d_ in . ci.rcuit s .of m achi.nes a.f te r. e ne r^^. 

isQl.atip.n .shall .be p.r^^^ 

With . .this, .exce p.tioii.,. .s.o.m e . circuit, s .m.a y be . alio wed. . to .be . cpn.nec.t ed . to .the 
^ne.rgy. .so.urc.e..for .the purpose .of .re^^ 
tion, . interior .l.ig.hy^^^^ 
s^c.ure .safety, p.f operator s,'.' 

4.2 Other means to prevent unexpected [unintended] start-up 

If the use of isolation and energy dissipation is not appropriate (e.g. for frequent 
short interventions) J the designer shall provide, according to the risk assessment in 
accordance with JIS B 9702, other measures (see clause 6) to prevent unexpected 
start-up. x\dditional means such as signalling and/or warning may be appropriate (see 
Annex B). 

NOTE 1 Examples of tasks which can require the presence of persons in danger 
zones are given in Annex A. 

NOTE 2 The designer should determine as completely as possible the different 
machine operating modes and the need for the presence of persons in 
danger zones. Appropriate safety measures can then be provided. These 
measures should prevent operators from being induced to use hazardous 
operating modes and hazardous intervention techniques caused by 
technical difficulties in the use of the machine (see JIS B 9700-l;2004, 
3,22). 

5 Means for isolation and energy dissipation 

5.1 Devices for isolation from power supplies 

5.1.1 Isolation devices shall- 

- ensure a reliable isolation (disconnection, separation); 

- have a reliable mechanical link between the manual control and the isolating ele- 
ment(s); 

- be equipped with clear and unambiguous identification of the state of the isolation 
device which corresponds to each position of its manual control (actuator). 

NOTE 1 For electrical equipment, a supply disconnecting device complying with 
JIS B 9960-1-1999, 5.3 "Supply disconnecting (ksolating) device" meets this 
requirement. 

NOTE 2 Plug and socket systems (for electrical supplies), or their pneumatic, 
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hydraulic or mechanical equivalents, are examples of isolating devices 
with which it is possible to achieve a visible and reliable discontinuity in 
the power supply circuits. For electrical plug/socket combinations, see JIS 
B 9960-1:1999, 5.3.2 d). 

NOTE 3 For hydraulic and pneumatic equipment, see also EN 982U996, 5.1.6 and 
EN 983^1996, 5.1.6. The provision (" ") is shown as reference. 

5..M... Hydraulic equipmentin 

lllX .P.r.deT l.Q. PI.Q Y.^.^t. the . une xpec ted .star t/.upj. the e. q uip me n t . shall . be . de : 
signed .to .isolate . from . e ne r gy . r e.s ource s . p r op er ly . .and .dis.sip a t e . fluid . p.r e s :. 
sui'ein.the.system.witho 

P.U.Q.U.m a tic .e quip.m e n t . shal.l .b e . a.s . folio ws.. 

-... -^.PPXQP T.i^t§. . i sol a ti on _ _of _ siipp 1 ie s .by. . i.sol ati.n c[ _ .de vice s (lo cldng .m ay. . .be 
necessary) 

t:. . . isol^ liilg. -device s . .wit.h . pr e.s sure . re duct ion _ mech ani.s.m . .(locking, _ m ay. . be 
necessary), 

~-..J-QniQVpi.oX.sypj)Qrt..of.m.e^^ 
Qn.the.systein 

—. . . isolation, .of pp.we.r .sup.phe s ''_ 

5..i^6.,.P.ne.um.atic..e.auip.m^^^^^ 

'AIn .grde r . .to , p.re y e nt une 

t.Q. iso],a te. frg.m . ene.r gy. .re s our. ce s. and dis sip_ a te fl.uid. p.r.es su.re .in .the system, 

yyifehqu.t .trouble , 

Hxdm VlJi-Q. .^ ciyip.me n t .sh al.l .be .as _f gU.g.\y s, 

-...autgmatici.o.ck.ing..ofi.solating^ 

P. a.ti n. .of pressure, pf hy .dr.a.ulic .equip.ni.e.n t 

- . . . .isolation, of p.qw er .supp He s 

Whe.n . .r e.s upply.in g. .after . .i sol ^^^^ 
in.Q.asure.s. shall be, nec.e 

5.1.2 The location and number of isolation devices will be determined by the configu- 
ration of the machine, the need for the presence of pei'sons in danger zones and the 
risk assessment. Each isolation device shall be readily identifiable as to w-hich machine, 
or part of it, it isolates (e.g. by durable marking w^here necessar^O. 

NOTE: For electrical equipment of machinery, see also JIS B 9960-1^999, 5.4. 

5.1.3 When, during isolation of the machine, certain circuits have to remain con- 
nected to their power suppl}^ in order, e.g., to hold parts, protect information or provide 
local lighting, special means shall be provided to ensure operator safety. 

NOTE: Such means include enclosures which can be opened only with a key or a 
special tool, w^arning labels and/or warning lights. 
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5.2 Locking [securing] devices 

The isolation devices shall be capable of being locked or otherwise secured in the 
"isolated" position. 

NOTE- Locking devices may not be necessary when a plug/socket combination is 
used and the plug can be kept under immediate supervision of the person 
present in the danger zone. 

Locking devices include- 

- facilities to apply one or more padlocks; 

- trapped~key interlocking devices (see JIS B 9710^2006, Annex E), one of the locks of 
which is associated with the manual control [actuator] of the isolating device; 

- lockable housings or enclosures. 

Locking devices are not required when reconnection cannot endanger persons. 

5.3 Devices for stored-energy dissipation or restraint [containment] 

5.3.1 General 

5.3.1.1 Devices for stored-energy dissipation or restraint [containment] shall be in- 
corporated into the machine where stored energy can give rise to a hazard. 

NOTE' Such devices include brakes intended to absorb kinetic energy of moving 
parts, resistors and relevant circuitry to discharge electrical capacitors, 
valves or similar devices to depressurize fluidic accumulators (see NOTE 3 
to 5.1.1). 

5.3.1.2 When dissipation of stored energy would excessively reduce the ability of the 
machine to be used, additional means shall be incorporated to reliably restrain or con- 
tain the remaining stored energy. 

5-3.1.3 The devices for energy dissipation or restraint [containment] should be se- 
lected and arranged so that- 

- dissipation or restraint [containment] results from the isolation of the machine (or 
part of it); 

- the energy dissipation process does not give rise to hazardous situations. 

5.3.1.4 The necessary procedures for energy dissipation or restraint [containment] 
shall be described in the instruction handbook of the machine or in warnings on the 
machine itself. 

5.3.2 Mechanical elements 

When mechanical elements can give rise to a hazardous situation 

- by virtue of their mass and position (e.g. unbalanced, or raised, or in any situation 
where they could move under the effect of gravity), 
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- or as a result of the action upon them of spring load (whatever this "spring" is made 

of), 

means shall be provided to bring them to the lowest energy state (e.g. lowest position 
or spring-relaxed) either by the usual macliine manual controls or by devices specifi- 
cally designed and identified (marked) for that function. 

When the mechanical elements cannot be brought into an intrinsically safe state, 
they shall be mechanically secured by brakes or mechanical restraint devices in accor- 
dance with JIS B 9700-1:2004, 3.26.7. 

5.3.3 Locking or securing facilities for the restraint [containment] devices 

The devices for energy restraint [containment] shall whenever necessary be capable 
of being locked or otherwise secured. 

5.4 Verification 

5.4.1 General 

The machine and the isolation and energy dissipation or restraint [containment] de- 
vices shall be designed, selected and arranged so that reliable verification of the effec- 
tiveness of the isolation and energy dissipation or restraint [containment] can be car- 
ried out. 

Provisions to verify the effectiveness of the isolation, energy dissipation and re- 
straint [containment] measures shall not impair their effectiveness, 

5.4.2 Provisions for verifying isolation 

Isolation from am^ power supply shall either be visible (visible break in the power 
supply circuits) or indicated by an unambiguous position of the manual control (actua- 
tor) of the isolating device. 

NOTF/ See also 5.1,1 relating to the mechanical link between the isolating ele- 
ment(s) and the manual control. 

5.4.3 Provisions for verifying energy dissipation or restraint [containment] 

5.4.3.1 Built-in devices (such, as pressure gauges) or test points shall be provided for 
verifying the absence of energy in parts of a machine in/on which interventions are in- 
tended. 

5.4.3.2 The instruction handbook (see JIS B 9700-2:2004, 6.5) shall provide precise 
guidance on safe verification procedures, 

5.4.3.3 Permanent labels shall be fixed to assemblies, warning against hazards due to 
stored energy (e.g. compressed springs) where assemblies can be removed or disman- 
tled. 



PROTECTED BY COPYRIGHT 



8 

B 9714 : 2006 (ISO 141.18 : 2000) 



6 Measures, other than isolation and energy dissipation, to prevent unexpected 
start up 

6.1 Design strategy 

For every application where isolation and energy dissipation are not appropriate for 
all interventions, the designer shall decide, in accordance with the risk assessment, the 
measures (among those listed below) considered necessary to prevent unexpected 
start-up. These are given as follows" 

~ measures (component design, selection and location) to prevent accidental genera- 
tion of start commands from external or internal influences in any part of the ma- 
chine (see 6.2); 

- measures, dependent on the system architecture/structure, provided to prevent ac- 
cidental start commands resulting in an unexpected start-up (see 6.3); 

- means automatically stopping the hazard-generating part of the machine before a 
hazardous situation can arise from an unexpected/unintended start-up of this part 
(see 6,4). 

The selected measures shall not be considered to be a substitute for the measures for 
isolation and energy dissipation set out in clause 5. 

NOTE- The selected measures will in most cases he a combination of the different 
measures described in this clause. 

6.2 Measures to prevent accidental generation of start commands 

6.2.1 Measures to prevent accidental actuation of (manual) start controls 

Accidental actuation of (manual) start controls, as well as unexpected results from 
actuating these devices (e.g. start-up of a machine other than the expected one, or ini- 
tiation of a movement in a wrong direction), shall be prevented by appropriate design, 
location, protection and marking of (manual) start controls [actuators]. The expected 
results/effects of actions on start controls shall be made clear, e.g. by use of indication 
means (see also first paragraph of x^nnex B), in cases w^here lack of such information 
can endanger persons. 

NOTE 1 Guidance is given in JIS B 9700-2:2004, 4.11.8, JIS B 9706-1:2001 and 
JIS B 9706-2:2001. 

NOTE 2 Other examples of measures to prevent unauthorized/unintended 
start" up are locking of start manual controls, passwords in programma- 
ble control systems. 

6.2.2 Design of safety-related parts of data storage and processing equipment 

The safety-related parts of the data storage and processing equipment (see figure l) 
shall be designed, and their components selected, so that the probability of this equip- 
ment generating start commands wdiich may lead to an unexpected start-up, when it is 
taken into account in the risk assessment carried out in accordance with JIS B 9702, 
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can be considered to be sufficiently low. 
NOTE 1 Guidance is given in- 

- JIS B 9700-2:2004, 4.11 

- JIS B 9960-1:1999, especially clauses 9 and 11. 

See also JISB 9705-1:2000. 

NOTE 2 Where programmable electronic systems are used for the control of ma- 
chinery, it is believed at present that it is difficult to determine, with any 
degree of certainty in situations where a significant hazard can occur due 
to the maloperation of the control system, that reliance on correct opera- 
tion of a single channel of programmable electronic equipment can be 
assured. Until this situation can be resolved, it is inadvisable to rely 
solely on the correct operation of such a single channel device (see JIS B 
9960-1:1999, NOTE to 11.3.4). 

6.2.3 Selection and location of power control elements 

Power control elements (e.g. contactors, valves: see figure 1) shall be selected and/or 
applied so that they cannot change their state under the effect of external influences 
(such as vibration or shocks of the highest expected value within intended conditions of 
use) or of disturbances of the power supply (such as pressure or voltage fluctuations 
within defined tolerances). 

Power control elements shall, if necessary (especially if they can be manually oper- 
ated), be located in an enclosure to prevent their unauthorized or unintended actua- 
tion. 

6.3 Measures to prevent accidental start commands resulting in unexpected start-up 

6.3.1 Principle 

Maintained stop commands are introduced, separately or in combination, in the ma- 
chine at different "levels" (see figure l). These can be generated either by stop control 
devices (see 6.3.2) or by safety [protective] devices (see 6.3.3). Mechanical disconnection 
(see 6.3*4) or moving-part immobilization (see 6.3.5) may be used instead of, or in addi- 
tion to, maintained stop commands. 

An accidental start command should not result in machine start-up if it is generated 
by/in a machine component placed above the level at which a maintained stop com- 
mand has been introduced (level A, B or C), or if mechanical disconnection (level D) or 
moving-part immobilization (level E) has been achieved (see figure l), 

6.3.2 Input, at level A, B or C (see figure l), of a maintained stop command generated 
by a stop control device 

To prevent unexpected [unintended] start-up due to accidental generation of start 
commands (including those generated within the control system itself), the stop man- 
ual control (or the stop control device) can be secured in the OFF/STOP condition, pro- 
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vicled that the control system is designed so that the stop commands from the stop 
control device have priority over the start commands in accordance with the essential 
safety requirement (see NOTE), Securing in the OFF/STOP condition can be achieved 
by means of* 

- a latching-in or key-operated stop control device which applies a maintained stop 
command until the device is reset manually; 

- a lockable selector switch with a rehable and unambiguous indication of position 
wdiich applies a maintained stop command until the switch is manually reset; 

- a lockable cover which, when locked closed, forces the stop manual control into the 
OFF/STOP condition. If this cover also prevents access to the start manual control, 
accidental operation of this start control is prevented; 

- a movable guard which, from the very beginning of its opening stroke, forces the 
stop manual control into the OFF/STOP condition. If the movable guard also pre- 
vents access to the start manual control, accidental operation of this start control is 
prevented. 

Criteria for the design and selection of the securing means suitable for the intended 
application are- 

- unambiguity, i.e. clear and unambiguous indication when the device is in the 
OFF/STOP condition; 

- reliability, as far as the ability of the device to remain in the OFF/STOP condition is 
concerned. 

Where a stop control is provided with a securing device to retain it in the OFF/STOP 
condition, removal of the securing device shall not by itself cause a restart command. 

note: For.stopping.dMces„th^ 

Annex A..1 . 2 . 4... The. provision. 0' /;') js . show n as reference . 

1) Regular.stopi.Each.ma^^ 

tQ- .the . state of. co mple te_ s top . E ach .works tatip n _shall_be, e.quipp e_d^ >vith .the _ control 
which . stops, a .p art an^^^^ 

^?.afe. .state .. . If the. .m achine ^ or . the . dangerous p art is .s topp e d^ . .Q ne rgy .supp.lie s . .to. .the 
actaator. shall, be. i,s.o.Iate.d, 

2) Emergen.cy.stgp. 

,E acb . ni ac.hine . _sh a^^ 
P,^^sent. .or .imminent . danger.. 

There. are..exceptions. 

- M.acMne.s in..w.hich.ris^^^ 
ther case.;that..th.e.d^^ 

n e ce ss ar J for .t r e a t ing_ r isk s_ .can not .be _t aken, 

- Portable, mac.hmes,. and 

T.he .em e r gency . stop. .device .sh all be . a.s .follows .. 
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"" iLshall be clearlyidentM^ 

~" It . sh all . s top_ d an^e r_o u s_ p.roce s se s as _ soon _ a s_ p o s s i,b le. . to. j) r e.ve ri t _ge n e r a tin g. new 

- If iie ce s s ar V, . t he . p articular s af e gu ar din g. de vie e ,sh all .s t ar t ^t o. oper a t e . or _ the . op;, 
e rat ion .sh all be .allowed.. 

The. .emerge ncy. stop. . con to 

be „ a ble . to . be_ de activate d. .o nly. by . app.rgpr ia te op e r a tipn, . The. m a chine _ s h all. not. .be 

i'.os.t ar te .d . a.nd . .be .only, . given, P. t^r mis.sipn _ of .rest.a.rt .b v .d.e .activation, .of .co.nt.rol .. .The 

stop. c.on tr ol ^ s h all. rio t .start ,th e .s topping. m e chanism ^ .be for e. .beings in.t he .p o s itipn p.f 

cpniiection. 

3) CombinecimacM 

as . an . as se mbly _ .the. s.t op co.nt.rol. .device s . .sh all. be . de.sig:.ne d. .by . the . .m a.nuf act ure r .to. 
s top. .n.o.t . .o.n.ly the. .m.achine . .but . .also. . .a.l.l . .deyice.s. jn . the . .hi ghe.r . J.ey el. .side . .an d/.o.r . .t he 
low^.r. leyel_.si.de. if continuat^^^^^ 

6.3.3 Input, at level A, B or C (see figure 1), of a maintained stop command generated 
by a safety [protective] device 

To prevent operation of a machine (from wdiatever cause, including unexpected 
start'up) when a person is in a danger zone, a safety Iprotective] device or combination 
of safety [protective] devices can be selected. The permanent stop command it gener- 
ates shall be introduced at the appropriate level (see figure l), in accordance with the 
risk assessment (see JIS B 9702). 

NOTE' Standards giving guidance include* 

- JIS B 9700-2:2004, 5.2; 

- JIS B 9710^2006, dealing with interlocking devices associated with 
guards. 

- ISO 13856" 1, dealing w^ith pressure-sensitive mats and floors. 

~ ISO 13856-2:2005, dealing with pressure-sensitive edges and bars. 

- ISO/DIS 13856"3, deahng with pressure-sensitive bumpers, plates, wires 
and similar devices. 

- JIS B 9704-1:2000 and JIS B 9704-2:2000, dealing with electro-sensitive 
protective equipment, 

(see Bibliography) 
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Figure 1 Application of measures, other than isolation and energy dissipation, to pre- 
vent accidental start commands resulting in unexpected start-up 

6.3.4 Mechanical disconnection (level D) 

Mechanical disconnecting devices, e.g. clutches, shall be designed, selected and used, 
and where necessary monitored, so that the separation from machine actuators is en- 
sured. 

6.3.5 Moving-part immobilization (level E) 

When a moving part is immobilized by means of a mechanical restraint device (see 
for example JIS B 9700-1*2004, 3.26.7), e.g. a wedge, spindle, strut, scotch, which is an 
integral part of the machine, the mechanical strength of this mechanical restraint de- 
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vice shall be sufficient to withstand the forces resulting from start"up of the machine. 

Where this is not practicable and mechanical immobilization is needed to prevent, 
for instance, movement of parts under the influence of gravity, or if starting up the 
machine actuators with immobilized moving parts can damage the machine or gener- 
ate risk for persons in its vicinitjs ^m interlocking device operating at level B or C shall 
prevent the machine from starting up as long as the mechanical restraint device im- 
mobilizes the moving parts. 

6.4 Automatic monitoring of the category 2 stopped condition 

Wien a machine is at rest as a result of a category 2 stop as defined in JIS B 
9960" 1^1999, 9.2.2, any accidental start command could give rise to an unexpected 
start'up. 

If other measures to prevent unexpected start-up are not practicable, one method is 
to monitor the stopped condition and to arrange for a category stop to be initiated as 
soon as the conditions for (or the beginning of) an unexpected start-up are detected. 
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Annex A (informative) 

Examples of tasks which can require the presence of 
persons in danger zones 



This Annex (informative) is to supplement the matters related to the text and not to 
constitute the provisions of this Standard. 

- inspection; 

- corrective actions (clearing blockages, etc.); 

- setting, adjustment; 

- manual loading/unloading; 
~ tool change; 

~ lubrication; 

- cleaning; 

~ decommissioning; 

- minor maintenance/repair; 

- diagnostic, testing; 

~ work on power circuits; 

- major maintenance (works requiring significant dismantling). 
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Annex B (informative) 
Signalling and warning 

This Annex (informative) is to supplement the matters related to the text and not to 
constitute the provisions of this Standard. 

The results/effects of the action on manual controls are more easily foreseen and un- 
derstood when the machine is fitted with signalling [indicating] devices giving infor- 
mation on the different states (e.g. "powder on", '\vaiting for a start command", "pro- 
gram running", "failure", "waiting for material feeding") and on the different possible 
modes of control and of operation of the machine (see JIS B 9706-1-2000 and JIS B 
9706-2:2001). 

When it is not practicable to see all danger zones from the operator control station, 
and w^hen the presence of persons in danger zones cannot be absolutely excluded, an 
audible warning signal (see ISO 7731:1986 and JIS B 9706-1:2001 and JIS B 
9706-2:2001) is initiated for a sufficient time before machine start-up to enable those 
persons either to leave the danger zone or to prevent the machine starting, e.g. by ac- 
tuating an emergency stop device. 
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